KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.
Microsoft Exchange Server Elevation of Privilege Vulnerability
An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PHP…
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to…
Wykonanie dowolnych poleceń zdalnie w routerach NETGEAR przez wstrzyknięcie metaznaków.
A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4,…
upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command.
Obejście uwierzytelnienia w CyberPanel umożliwia zdalne wykonanie dowolnych poleceń.
Nieokreślona podatność w Java Runtime Environment umożliwia zdalnym atakującym wpływ na poufność i integralność danych.
Wykorzystanie luki w Microsoft Outlook umożliwia zdalne wykonanie kodu.
An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an…
Luka w NuPoint Unified Messaging umożliwia atak path traversal i nieautoryzowany dostęp do danych.
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle…
The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the ViewLog.asp page and can be exploited…
Wykonanie złośliwego kodu w Adobe Flash Player i Adobe Reader umożliwia zdalny atak.
Luka w Adobe Flash Player umożliwia zdalne wykonanie dowolnego kodu.
Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This enables threat actors (who know the machineKey) to serialize a payload for…
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. DistributedAPI parameters are a serialized as JSON and…
Luka use-after-free w Internet Explorer umożliwia zdalne wykonanie kodu przez atakujących.
In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service (root or SYSTEM by default). This is…
Luka w serwerze SMBv1 w Windows umożliwia zdalne wykonanie kodu przez atakujących.
An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user running airflow worker/scheduler (depending…
Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version 7.18.0 before version 7.21.4, from version 8.0.0 before version 8.0.3, from version 8.1.0 before version 8.1.3, and from version 8.2.0 before…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory,… | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'. |
Pilne działanie | 8,8 | 99,96 % | ||
| Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection. | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection. |
Pilne działanie | 9,8 | 94,96 % | ||
| Microsoft Exchange Server Elevation of Privilege Vulnerability | Microsoft Exchange Server Elevation of Privilege Vulnerability |
Pilne działanie | 8,8 | 99,96 % | ||
| An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the… | An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PHP… |
Pilne działanie | 9,1 | 98,46 % | ||
| An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the… | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code. |
Pilne działanie | 8,8 | 99,94 % | ||
| Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to… |
Pilne działanie | 9,8 | 94,93 % | ||
| Wykonanie dowolnych poleceń zdalnie w routerach NETGEAR przez wstrzyknięcie metaznaków. | Wykonanie dowolnych poleceń zdalnie w routerach NETGEAR przez wstrzyknięcie metaznaków. |
Pilne działanie | 8,8 | 99,8 % | ||
| A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7,… | A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4,… |
Pilne działanie | 9,8 | 94,77 % | ||
| upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a… | upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command. |
Pilne działanie | 9,8 | 94,76 % | ||
| Obejście uwierzytelnienia w CyberPanel umożliwia zdalne wykonanie dowolnych poleceń. | Obejście uwierzytelnienia w CyberPanel umożliwia zdalne wykonanie dowolnych poleceń. |
Pilne działanie | 9,8 | 94,75 % | ||
| Nieokreślona podatność w Java Runtime Environment umożliwia zdalnym atakującym wpływ na poufność i integralność danych. | Nieokreślona podatność w Java Runtime Environment umożliwia zdalnym atakującym wpływ na poufność i integralność danych. |
Pilne działanie | 10,0 | 93,69 % | ||
| Wykorzystanie luki w Microsoft Outlook umożliwia zdalne wykonanie kodu. | Wykorzystanie luki w Microsoft Outlook umożliwia zdalne wykonanie kodu. |
Pilne działanie | 9,8 | 94,66 % | ||
| An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7,… | An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an… |
Pilne działanie | 9,8 | 94,65 % | ||
| Luka w NuPoint Unified Messaging umożliwia atak path traversal i nieautoryzowany dostęp do danych. | Luka w NuPoint Unified Messaging umożliwia atak path traversal i nieautoryzowany dostęp do danych. |
Pilne działanie | 9,1 | 98,11 % | ||
| Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle… |
Pilne działanie | 9,8 | 94,55 % | ||
| The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability… | The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the ViewLog.asp page and can be exploited… |
Pilne działanie | 9,8 | 94,43 % | ||
| Wykonanie złośliwego kodu w Adobe Flash Player i Adobe Reader umożliwia zdalny atak. | Wykonanie złośliwego kodu w Adobe Flash Player i Adobe Reader umożliwia zdalny atak. |
Pilne działanie | 8,8 | 99,41 % | ||
| Luka w Adobe Flash Player umożliwia zdalne wykonanie dowolnego kodu. | Luka w Adobe Flash Player umożliwia zdalne wykonanie dowolnego kodu. |
Pilne działanie | 9,8 | 94,35 % | ||
| Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack… | Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This enables threat actors (who know the machineKey) to serialize a payload for… |
Pilne działanie | 9,8 | 94,34 % | ||
| Wazuh is a free and open source platform used for threat prevention, detection, and response. | Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. DistributedAPI parameters are a serialized as JSON and… |
Pilne działanie | 9,9 | 93,84 % | ||
| Luka use-after-free w Internet Explorer umożliwia zdalne wykonanie kodu przez atakujących. | Luka use-after-free w Internet Explorer umożliwia zdalne wykonanie kodu przez atakujących. |
Pilne działanie | 9,3 | 96,83 % | ||
| In Wing FTP Server before 7.4.4. | In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service (root or SYSTEM by default). This is… |
Pilne działanie | 10,0 | 93,24 % | ||
| Luka w serwerze SMBv1 w Windows umożliwia zdalne wykonanie kodu przez atakujących. | Luka w serwerze SMBv1 w Windows umożliwia zdalne wykonanie kodu przez atakujących. |
Pilne działanie | 8,8 | 99,23 % | ||
| An issue was found in Apache Airflow versions 1.10.10 and below. | An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user running airflow worker/scheduler (depending… |
Pilne działanie | 8,8 | 99,19 % | ||
| Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version… | Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version 7.18.0 before version 7.21.4, from version 8.0.0 before version 8.0.3, from version 8.1.0 before version 8.1.3, and from version 8.2.0 before… |
Pilne działanie | 8,8 | 99,17 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.